diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 11f5cae..f356012 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,7 +53,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 + uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -76,6 +76,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 + uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 65ab03e..b97e38b 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -58,13 +58,13 @@ jobs: exit-code: '0' - name: Upload Trivy image scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 + uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 with: sarif_file: 'trivy-image-results.sarif' category: 'trivy-image' - name: Upload Trivy Python scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 + uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 with: sarif_file: 'trivy-py-results.sarif' category: 'trivy-python'